A dangerous vulnerability was found on Apple devices

Apple has announced that it has fixed a dangerous vulnerability on its devices. This was reported by ArsTechnica.

The media authors noted that we are talking about vulnerabilities CVE-2023-41064 and CVE-2023-41061, which are associated with loading images. Citizen Lab specialists gave the vulnerabilities the common name BLASTPASS. Using this system flaw, attackers can hack an iPhone and Mac simply by sending an image to it.

The Tim Cook corporation said that it fixed the found flaw with the help of updates to iOS 16.6.1, iPadOS 16.6.1, macOS 13.5.2 and watchOS 9.6.2, which were released for smartphones, tablets, computers and smartwatches, respectively.

Citizen Lab also emphasized that BLASTPASS allowed Pegasus malware to be installed on users’ devices, which was used to spy on politicians and public figures. Apple responded that the described vulnerability was indeed present in the brand’s gadgets, but it was possible to prohibit the installation of third-party software by activating “Blocking Mode.”

Earlier, specialists from Jamf Threat Labs said that attackers have learned to deceive iPhone users using a fake airplane mode on the device. In this regard, experts warned device owners that their personal smartphone should not be handed over to strangers.